Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 9W/lKQ1dTsAZRe77DbbQ/NLK4tGAaVFGjTc0AdjkKx4=
Subject key identifier: 43:80:2C:72:B0:6F:C4:BF:20:8D:CA:1B:0A:A5:9F:35:FF:1D:7E:01
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 019D258394000EA8488CCDF7B2EAE04D0B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:13 +0000
Manifest this update: Wed 25 Mar 2026 15:01:13 +0000
Manifest next update: Thu 26 Mar 2026 15:01:13 +0000
Files and hashes: 1: OLNyTBFLB0GRgG6WCzbXR7UvRrA.roa (hash: I/YlyloEBTVluHRzMYW18o3EO4jxYYroq7F9Zg2Jggo=)
2: fCBNQoZpXWRf7HiESYlfI6ubNuI.roa (hash: Xi95Rj4tFLGoeBm6XrdM9ofNJV6OvWlEYiGW/UAuLU4=)
3: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: hgpELuLybaTT3VnHwJZD2CfNdBh6m748IBgGolmt3BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:94:00:0e:a8:48:8c:cd:f7:b2:ea:e0:4d:0b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Mar 25 15:01:13 2026 GMT
Not After : Mar 26 15:01:13 2026 GMT
Subject: CN=43802c72b06fc4bf208dca1b0aa59f35ff1d7e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:49:d5:32:a2:d6:5f:3a:8d:75:83:6d:05:
53:fe:8d:87:94:f8:b8:0b:89:df:57:86:dc:42:e5:
fc:f2:76:92:10:e4:45:bf:e2:60:52:eb:8a:08:ae:
4a:eb:9f:f8:f0:27:80:10:60:18:f3:56:71:dc:02:
dc:b8:0e:a4:d9:ab:7a:10:c3:60:4d:74:42:17:82:
bf:17:d8:08:0f:a7:e4:de:b0:35:c2:7b:c7:e1:88:
1f:50:5f:3a:70:52:34:28:9a:96:78:f1:46:a1:5e:
4d:e5:96:1f:22:1a:38:b3:7d:81:8c:2b:9c:50:c4:
20:27:0a:c3:09:af:e1:62:f9:4b:a1:b7:be:d6:7f:
46:ad:22:32:04:be:b4:de:18:92:7a:7b:03:68:12:
f2:8f:f0:cc:70:a7:f8:f4:eb:16:8e:c8:ec:08:77:
1b:14:4b:1e:8e:71:3e:39:0e:61:a7:e4:bf:bc:c8:
d7:22:1e:4b:18:01:48:c6:d6:b0:23:d3:70:92:24:
91:4e:6d:f2:42:0e:c0:f3:a9:b3:44:d5:8c:31:d8:
9c:cc:5f:33:47:1e:1c:f7:80:10:10:da:e1:d8:6c:
7e:24:2d:c2:26:f8:a3:ff:c2:ce:9d:bf:60:9f:83:
ab:dc:3b:8c:86:ef:7d:d2:f8:83:35:e0:a3:1a:3c:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:2C:72:B0:6F:C4:BF:20:8D:CA:1B:0A:A5:9F:35:FF:1D:7E:01
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:f5:41:60:5b:17:b5:a3:df:04:9b:54:7e:af:76:aa:54:
5c:a6:6d:b5:71:ce:dd:91:ad:cd:42:7d:c1:ba:0b:88:92:2f:
43:00:85:a4:a4:63:7d:4c:1e:1c:85:74:c9:3f:c6:ac:41:31:
26:13:83:e1:a5:a0:5c:3e:e9:b6:66:98:4d:62:00:d5:b0:1d:
f6:5f:17:f1:64:44:a7:a1:6a:d5:64:53:5a:cb:e9:9b:83:7b:
ec:da:a2:44:9c:c8:ab:e0:ec:56:e9:7f:e3:d7:65:52:ac:d2:
25:93:48:ac:30:12:85:80:d4:1c:2d:56:4b:9f:37:14:e4:25:
05:3d:a1:73:8b:da:cb:1d:31:c7:6c:88:2b:24:36:1f:0d:9a:
04:35:6d:7e:29:cc:64:db:c4:7c:ce:27:62:25:ab:9b:8a:93:
68:af:39:ab:54:ac:ff:b4:62:b4:92:97:ce:af:3f:37:ad:94:
86:fe:26:70:2a:55:32:a3:f4:83:0e:0f:20:95:1c:74:0c:62:
33:df:c5:5e:aa:8e:39:69:17:ed:d9:ed:37:29:22:c6:19:eb:
7a:a2:7d:c8:bb:f1:a2:71:16:98:20:9f:ce:10:7c:ad:67:66:
df:4a:b2:27:2f:b8:cd:be:46:fb:9e:22:4f:48:29:ff:01:93:
f9:f6:bf:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg5QADqhIjM33surgTQuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGNmYjliNWY0NDVmZDJmNmNjZmExNzljMzdjNTM0NDli
MmFmMDYwHhcNMjYwMzI1MTUwMTEzWhcNMjYwMzI2MTUwMTEzWjAzMTEwLwYDVQQD
Eyg0MzgwMmM3MmIwNmZjNGJmMjA4ZGNhMWIwYWE1OWYzNWZmMWQ3ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0dJ1TKi1l86jXWDbQVT/o2HlPi4
C4nfV4bcQuX88naSEORFv+JgUuuKCK5K65/48CeAEGAY81Zx3ALcuA6k2at6EMNg
TXRCF4K/F9gID6fk3rA1wnvH4YgfUF86cFI0KJqWePFGoV5N5ZYfIho4s32BjCuc
UMQgJwrDCa/hYvlLobe+1n9GrSIyBL603hiSensDaBLyj/DMcKf49OsWjsjsCHcb
FEsejnE+OQ5hp+S/vMjXIh5LGAFIxtawI9NwkiSRTm3yQg7A86mzRNWMMdiczF8z
Rx4c94AQENrh2Gx+JC3CJvij/8LOnb9gn4Or3DuMhu990viDNeCjGjztAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOALHKwb8S/II3KGwqlnzX/HX4BMB8GA1UdIwQY
MBaAFKmM+5tfRF/S9sz6F5w3xTRJsq8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVl6N20xOUVYOUwyelBvWG5EZkZORW15cndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kZjg1NTEtM2Y5Zi00NGIyLWI3ZTQt
ODg2NTkzZjdkY2UwLzEvcVl6N20xOUVYOUwyelBvWG5EZkZORW15cndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9kZjg1NTEtM2Y5Zi00NGIyLWI3ZTQtODg2NTkzZjdkY2Uw
LzEvcVl6N20xOUVYOUwyelBvWG5EZkZORW15cndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidP1QWBb
F7Wj3wSbVH6vdqpUXKZttXHO3ZGtzUJ9wboLiJIvQwCFpKRjfUweHIV0yT/GrEEx
JhOD4aWgXD7ptmaYTWIA1bAd9l8X8WREp6Fq1WRTWsvpm4N77NqiRJzIq+DsVul/
49dlUqzSJZNIrDAShYDUHC1WS583FOQlBT2hc4vayx0xx2yIKyQ2Hw2aBDVtfinM
ZNvEfM4nYiWrm4qTaK85q1Ss/7RitJKXzq8/N62Uhv4mcCpVMqP0gw4PIJUcdAxi
M9/FXqqOOWkX7dntNykixhnreqJ9yLvxonEWmCCfzhB8rWdm30qyJy+4zb5G+54i
T0gp/wGT+fa/qQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:41 2026 by rpki-client